Level 2 Firewall

[vachev]

Hi,

Is it possible to configure DynFi as a Level 2 Firewall (no routing, no nat, no vlan bridging,...). Only packet inspection, filtering and blocking.

What I need is a level 2 firewall to put between my BGP router handling Internet connectivity and my servers having public IP addresses.

Have a nice day

[gregober]

Hi,

Is it possible to configure DynFi as a Level 2 Firewall (no routing, no nat, no vlan bridging,...). Only packet inspection, filtering and blocking.

What I need is a level 2 firewall to put between my BGP router handling Internet connectivity and my servers having public IP addresses.

Have a nice day

It is indeed possible to configure the DynFi Firewall as a L2 firewall only.
To do that, you would need to:

• Deactivate the NAT in "Firewall >> NAT >> Outbound"
• Configure your WAN bound to your BGP router in "subnet A"
• Configure your LAN (or any other interface) in another "subnet B"
• Apply filtering accordingly using firewall rules

As a bonus you could also enable Ntop to check packets flowing in / out or some other filters based on various technologies.
Hope this helps.